Critical React Router Vulnerabilities Allow Attackers to Access or Modify Server Files

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical React Router Vulnerabilities Allow Server File Access Security researchers have identified critical vulnerabilities in React Router that enable attackers to access or modify server files through directory traversal. These flaws impact multiple packages within the React Router ecosystem and have a CVSS v3 score of 9.8, indicating critical severity. 3 sources 45